This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/yTBqPRFUVfKdzLterimo113_dkQ.roa File: yTBqPRFUVfKdzLterimo113_dkQ.roa (raw, json) Hash identifier: qNzAUGKwPF55HCrIzh2nSa4zmob6mdMkWCPw4jO7Mk4= Subject key identifier: C9:30:6A:3D:11:54:55:F2:9D:CC:BB:5E:AE:29:A8:D7:5D:FF:76:44 Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019B7BA43D666511F4E5760B4205EDB51601 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/yTBqPRFUVfKdzLterimo113_dkQ.roa Signing time: Thu 01 Jan 2026 22:18:39 +0000 ROA not before: Thu 01 Jan 2026 22:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 5.80.0.0/15 maxlen: 15 5.81.0.0/16 maxlen: 16 31.48.0.0/13 maxlen: 13 51.14.0.0/16 maxlen: 16 62.6.0.0/16 maxlen: 16 62.7.0.0/16 maxlen: 16 62.172.0.0/16 maxlen: 16 81.128.0.0/11 maxlen: 11 81.128.0.0/12 maxlen: 12 86.128.0.0/10 maxlen: 10 86.128.0.0/11 maxlen: 11 86.128.0.0/12 maxlen: 12 109.144.0.0/12 maxlen: 12 185.93.168.0/22 maxlen: 22 192.12.73.0/24 maxlen: 24 193.37.160.0/20 maxlen: 20 194.72.0.0/14 maxlen: 14 194.79.48.0/22 maxlen: 22 195.99.0.0/16 maxlen: 16 195.171.0.0/16 maxlen: 16 212.82.0.0/19 maxlen: 19 212.140.0.0/16 maxlen: 16 213.1.0.0/16 maxlen: 16 213.120.0.0/14 maxlen: 14 217.32.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3d:66:65:11:f4:e5:76:0b:42:05:ed:b5:16:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9306a3d115455f29dccbb5eae29a8d75dff7644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:6f:a4:9a:0e:8a:36:54:7f:a8:fd:42:f6: 97:12:43:f7:3e:7f:86:1f:08:08:b9:5a:59:35:ad: e0:64:ef:35:d4:54:47:e0:26:d4:72:4c:a0:c0:d4: 88:e8:4d:f7:27:9c:db:e7:9e:d3:84:32:4d:f8:f7: 32:33:4f:74:92:23:88:c8:30:7d:7b:e8:cd:f5:df: 54:6e:96:de:c5:bd:de:d4:4f:36:ea:03:58:fe:d6: 44:1c:6f:1e:9b:da:2b:ad:51:db:22:5e:8f:5c:75: 83:63:ac:a3:8b:e1:58:12:77:f0:3a:e7:24:35:84: d8:5f:15:e7:60:7e:32:58:86:6f:31:a8:34:a9:89: 28:f8:9f:84:48:f2:2e:67:87:60:b6:31:0d:7f:1e: dc:bd:d5:5f:08:d0:cb:be:40:6d:a5:b5:c6:99:5a: 77:bf:36:51:4f:75:b3:81:35:0d:ac:25:3a:15:a5: 89:d5:b3:db:84:2c:b3:2d:18:d4:25:02:f7:b1:75: 4f:cb:e3:f3:fb:7d:ba:f2:75:41:73:dc:ff:58:14: fd:f6:29:a3:3e:ac:4e:71:53:12:67:d9:68:70:45: 99:e3:c8:a5:d5:79:e3:c3:12:74:a8:7d:82:1e:40: 00:59:e5:06:a8:e7:b2:36:d7:22:9c:7d:87:70:51: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:30:6A:3D:11:54:55:F2:9D:CC:BB:5E:AE:29:A8:D7:5D:FF:76:44 X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/yTBqPRFUVfKdzLterimo113_dkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.80.0.0/15 31.48.0.0/13 51.14.0.0/16 62.6.0.0/15 62.172.0.0/16 81.128.0.0/11 86.128.0.0/10 109.144.0.0/12 185.93.168.0/22 192.12.73.0/24 193.37.160.0/20 194.72.0.0/14 194.79.48.0/22 195.99.0.0/16 195.171.0.0/16 212.82.0.0/19 212.140.0.0/16 213.1.0.0/16 213.120.0.0/14 217.32.0.0/12 Signature Algorithm: sha256WithRSAEncryption 0a:c3:a8:c5:95:4e:4f:60:a4:7c:8f:0d:34:43:bc:24:d4:c9: f3:73:4f:56:c0:09:7c:d3:81:16:38:0c:b9:6b:64:09:c5:99: 97:47:ca:26:d7:1f:94:61:07:ec:8c:e8:a4:e1:0d:94:f5:ee: f1:52:90:ce:d4:cb:28:d5:8f:13:d9:eb:3b:df:a5:02:c7:48: 54:9e:a4:2b:d2:ee:76:cd:b0:54:ee:5b:d9:6d:2a:a7:05:1e: 2f:0b:9e:26:c7:4a:be:75:89:d6:f8:5f:89:96:2f:f4:75:4a: 45:bd:a5:24:87:66:35:de:0b:55:b2:bc:6b:20:c3:63:e2:38: 52:35:06:73:f7:4e:f4:d3:4d:da:06:fc:11:da:d2:a9:f5:20: 64:4a:d8:1d:ef:ca:38:60:ab:04:92:0a:4a:1a:e4:65:ae:bc: 5f:9a:53:e7:d8:aa:58:5c:19:d8:ff:14:01:1a:3b:e2:4e:74: 0e:39:2d:01:8a:81:62:16:ad:e6:a4:9d:ef:10:63:e5:72:50: 13:e5:1c:f9:81:41:9a:65:9c:ec:de:06:d7:1a:16:ca:9a:47: b8:26:d2:34:15:21:8c:38:ed:72:39:b7:66:e7:8d:27:d8:0d: 2d:2a:6d:9c:05:76:9e:5b:8b:e7:e2:20:a8:a3:6d:8f:1d:e7: cd:2a:cc:f1 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt7pD1mZRH05XYLQgXttRYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTMwNmEzZDExNTQ1NWYyOWRjY2JiNWVhZTI5YThkNzVkZmY3NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg5vpJoOijZUf6j9QvaXEkP3Pn+G HwgIuVpZNa3gZO811FRH4CbUckygwNSI6E33J5zb557ThDJN+PcyM090kiOIyDB9 e+jN9d9Ubpbexb3e1E826gNY/tZEHG8em9orrVHbIl6PXHWDY6yji+FYEnfwOuck NYTYXxXnYH4yWIZvMag0qYko+J+ESPIuZ4dgtjENfx7cvdVfCNDLvkBtpbXGmVp3 vzZRT3WzgTUNrCU6FaWJ1bPbhCyzLRjUJQL3sXVPy+Pz+3268nVBc9z/WBT99imj PqxOcVMSZ9locEWZ48il1XnjwxJ0qH2CHkAAWeUGqOeyNtcinH2HcFG7jwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFMkwaj0RVFXyncy7Xq4pqNdd/3ZEMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEveVRCcVBSRlVWZktkekx0ZXJpbW8xMTNfZGtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAEwaQMDAQVQAwMD HzADAwAzDgMDAT4GAwMAPqwDAwVRgAMDBlaAAwMEbZADBAK5XagDBADADEkDBATB JaADAwLCSAMEAsJPMAMDAMNjAwMAw6sDBAXUUgADAwDUjAMDANUBAwMC1XgDAwTZ IDANBgkqhkiG9w0BAQsFAAOCAQEACsOoxZVOT2CkfI8NNEO8JNTJ83NPVsAJfNOB FjgMuWtkCcWZl0fKJtcflGEH7IzopOENlPXu8VKQztTLKNWPE9nrO9+lAsdIVJ6k K9Luds2wVO5b2W0qpwUeLwueJsdKvnWJ1vhfiZYv9HVKRb2lJIdmNd4LVbK8ayDD Y+I4UjUGc/dO9NNN2gb8EdrSqfUgZErYHe/KOGCrBJIKShrkZa68X5pT59iqWFwZ 2P8UARo74k50DjktAYqBYhat5qSd7xBj5XJQE+Uc+YFBmmWc7N4G1xoWyppHuCbS NBUhjDjtcjm3ZueNJ9gNLSptnAV2nluL5+IgqKNtjx3nzSrM8Q== -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:22 2026 by rpki-client